Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File: au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier: c1XU8yUznlUtxERH4aSIA6yCHzF+tRiVlc2931pcSXI=
Subject key identifier: B8:06:7C:3A:58:26:4E:49:5C:90:F0:0D:6F:23:46:E3:DA:63:CE:05
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer: /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial: 019A4EF42616F91E2F6ABAE2AC10F33C157A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: Q6Cqgmq/dBVqNpx6jf9xG4aQZRreBfKVk5c4eceYITM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:26:16:f9:1e:2f:6a:ba:e2:ac:10:f3:3c:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=b8067c3a58264e495c90f00d6f2346e3da63ce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:d7:11:26:ae:41:1a:c7:fb:09:ee:5d:05:
79:2e:3f:37:ca:1c:c3:70:d7:cd:54:b3:01:0e:a2:
b0:8d:8b:55:03:fb:f6:0b:97:85:31:7d:8b:89:5a:
38:aa:ed:1f:5d:63:42:9e:10:fc:ef:91:ee:5b:90:
78:cd:de:43:f3:ff:9d:c6:21:b5:ae:b6:8c:04:78:
92:6b:de:6b:26:b8:6e:2c:83:62:f8:bb:37:ae:66:
35:61:93:9f:e0:a7:bb:70:60:be:c4:52:91:fb:3d:
d8:67:e8:33:11:83:6d:f5:a2:c2:95:0f:f7:bc:bf:
f0:ec:b5:fd:d6:94:e4:04:ec:63:6b:9c:65:e1:e3:
06:6e:b4:d8:01:47:26:33:b3:9b:13:49:85:70:b2:
db:e8:a0:c7:67:07:9f:90:69:c3:a6:73:02:64:ad:
c3:7a:34:81:f8:0d:3e:e1:0a:4e:95:bd:45:9e:d1:
c4:da:f0:23:97:7e:70:75:cf:72:93:df:32:88:16:
a2:8f:4d:43:3c:6e:ec:f9:aa:4c:4c:ce:9d:9c:f0:
9f:4b:d4:9b:93:7b:1e:2c:db:b3:7e:86:53:f2:5e:
18:97:7d:f7:31:b8:ea:a6:4f:b5:72:61:aa:6d:64:
49:f5:aa:ec:1b:a5:82:9c:f9:55:84:d9:6f:87:dc:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:7C:3A:58:26:4E:49:5C:90:F0:0D:6F:23:46:E3:DA:63:CE:05
X509v3 Authority Key Identifier:
keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1e:8a:87:d7:9d:d0:7c:de:b0:7c:0b:05:24:95:cd:3b:b3:
b7:86:c3:cd:b3:62:1b:49:6c:10:0d:d7:f4:0b:6c:e2:ca:e8:
3d:8a:5e:92:39:85:3d:d3:9c:ef:da:97:9a:fe:82:2d:d6:a6:
7c:bd:c5:98:10:7d:e8:53:0a:44:74:6b:57:40:8d:9b:25:d0:
99:dc:fc:b8:ed:6c:ae:2b:df:35:63:75:da:dd:68:cb:13:b7:
ca:a8:55:68:c6:75:14:c4:fc:6f:67:87:33:bc:30:07:51:96:
28:0e:37:b4:83:5f:9a:1f:7a:2b:7d:5c:67:40:56:eb:06:52:
16:c5:95:01:c5:87:3d:2e:97:7c:89:43:6e:2a:ab:09:09:73:
fb:fd:20:03:b4:50:cf:59:c9:10:16:f1:f6:c9:97:44:b4:f3:
47:ba:6a:a5:1a:17:4f:bf:c8:3e:d0:b2:29:41:4f:f7:4b:eb:
e0:72:e2:c1:1c:b4:1d:90:35:71:9a:74:db:14:31:00:3d:9c:
60:34:48:ad:cc:64:30:fe:c5:03:3d:08:95:0e:15:c2:c4:48:
93:0f:d4:e5:14:da:6e:9b:23:e9:f4:f5:0b:85:c9:30:ed:ee:
dc:ae:2d:65:e5:e1:c8:44:b3:2c:13:8c:94:0c:33:d6:fd:1f:
f0:eb:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:26 2025 by rpki-client